What an assistant can access through the iClosed MCP server, what you approve, and how to take access away.
When an assistant connects, it asks for scopes: permission to read or write one area of your workspace, such as contacts:read or deals:write. The consent screen lists them before you click Allow access. Tools lists the scope each tool needs.
| Area | Scopes | Your role needs access to |
|---|---|---|
| Contacts | contacts:read, contacts:write | Contacts, calls and deals |
| Contact notes | contacts.notes:read, contacts.notes:write | Contacts, calls and deals |
| Custom fields | fields:read, fields:write | Custom fields, or Contacts, calls and deals (read only) |
| Deals | deals:read, deals:write | Contacts, calls and deals |
| Events | events:read, events:write | Events |
| Event calls | eventCalls:read | Contacts, calls and deals |
eventCalls:write | Scheduled events | |
| Call outcomes | outcomes:write | Contacts, calls and deals |
| Products | products:read, products:write | Products |
| Transactions | transactions:read, transactions:write, transactions:delete | Contacts, calls and deals |
| Availability | availabilities:read | Availability |
| Users | users:read | User management |
Webhooks, billing and API keys are not available through MCP.
The assistant acts as you. Even with a scope approved, it can only do what your iClosed role allows. If the assistant asks for something your role doesn't have, the consent screen tells you, and that access isn't granted.
If your role only has access to your own records (for example, your own contacts, events or scheduled calls), the assistant also sees only those records.
Assistants register themselves with iClosed when you first connect. iClosed has not reviewed these registrations, so the consent screen marks them Self-registered · Unverified.
Before you click Allow access:
- Check that you started the connection yourself, from the assistant you expect.
- Check the redirect notice. For Claude it points to
https://claude.ai. - Check the workspace and the permissions listed.
The assistant app is operated by its provider, not by iClosed.
When an assistant calls an iClosed tool, the results (for example contact names, emails and call details) are sent to that assistant's provider, such as Anthropic, Cursor or Microsoft. The provider handles that data under its own terms and privacy policy. Check them, and your company's policies, before you connect.
Connecting an assistant is covered by Section 9 (Third-party services, customer-controlled integrations and external applications) of the iClosed Terms of Service and by the Acceptable Use Policy.
Text stored in your workspace, such as a contact note or a booking answer written by a lead, could contain instructions aimed at the AI. A model may follow them. To reduce the risk:
- Set write tools to Needs approval (or your client's equivalent) and read each action before you confirm it.
- Be careful about connecting iClosed in the same chat as tools that can send email, post messages or browse the web.
- Approve only the scopes you need.
- One connection: Settings → Developer → Connected apps → Revoke.
- Every member's assistant: an account owner or super admin turns off Settings → Developer → MCP. Connections made by the account owner or a super admin keep working, so revoke those one by one. See For admins.
- Also remove the connector or server from the assistant itself.